NNytcc·Oct 30OSEP Certification Exam Guide: Exam Format, Preparation, and ReportingPrepare for the OSEP certification exam with PEN-300 topics, exam format, core skills, a study plan, readiness tips, and report requirements for 2026.9 min read·nytcc.hashnode.dev
YYogeshwar Peela·Sep 28TryHackMe: Binary Heaven - WriteupTryHackMe Binary Heaven walkthrough: Ghidra,GDB, reverse engineering, ret2libc, SUID exploitation, PATH hijacking, and Linux privilege escalation tips8 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Sep 22TryHackMe: Adventure Time WriteupAdventure Time TryHackMe writeup covering FTP EXIF clues, web puzzles, Morse, AES, Vigenère, Spoon, steganography, and Exim CVE-2019-10149.11 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Sep 22TryHackMe: Python Playground WriteupPython Playground TryHackMe writeup covering Python sandbox bypass, RCE, credential recovery, Docker container escape, and SUID privilege escalation.8 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Sep 1WebVersePro : SnowedOut writeupSnowedOut on WebVerseLabs Pro: exploit Pinehollow Plow Tracker with JavaScript injection and forged CSP reports to retrieve the flag.6 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 23BrunnerCTF 2026 : The Three Ways WriteupThe Three Ways BrunnerCTF 2026 writeup: exploit Gitea, Drone CI, leaked secrets, and an unsigned rollout agent to gain root access.18 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 23BrunnerCTF 2026 : Magic or Not WriteupMagic or Not BrunnerCTF 2026 writeup: crack single-byte XOR using image magic bytes, decode four slices, and stitch them to recover the flag.6 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 23BrunnerCTF 2026 : Half Baked WriteupHalf Baked BrunnerCTF 2026 writeup: reconstruct a PyTorch model, chain six layers, restore ReLU activations, and decode the hidden flag.13 min read·exploitnotes.hashnode.dev
UUday Bhale·Aug 17Part 3: From Admin Panel to Remote Code ExecutionFollow a web pentest attack chain from admin panel access and file upload bypass to RCE, web shell, reverse shell, and server compromise.7 min read·hackwithrudraub.hashnode.dev
DDaniel Isaac E·Aug 15The Endpoint Wasn't Vulnerable. The Attack Chain Was.Introduction The first finding wasn't critical. It wasn't even particularly interesting. There was no SQL Injection. No Remote Code Execution. No authentication bypass. Just an API endpoint that shoul9 min read·danielisaace.hashnode.dev1
